Zusy.404982 (B) removal guide

The Zusy.404982 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.404982 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Enumerates running processes
• CAPE extracted potentially suspicious content
• Unconventionial binary language: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Creates a copy of itself

How to determine Zusy.404982 (B)?

File Info:
name: 86F69BB2F5203AD109A3.mlw
path: /opt/CAPEv2/storage/binaries/5da8125e1fedc22b4cf894e72faabf0950232b592dbc5d3ed415f6569951bf2b
crc32: 272464B5
md5: 86f69bb2f5203ad109a34e65ab88081f
sha1: 3acc525ecf1cbf5a53b680ac2a473079291033b7
sha256: 5da8125e1fedc22b4cf894e72faabf0950232b592dbc5d3ed415f6569951bf2b
sha512: bf900282789844c4304b8820f729ddab1dcdef87d6f59c3b1d8d338069f1aedcd5703da891fb4d71c44a7ef09e969c56a9c57768b2c2611d1893e2bdcf023401
ssdeep: 24576:h1BfN/Z4FgsZCX8dJnj9lN2j28mhkI52HpxgPh01d:hXN/ZqgsZCX8dtjzNu7mh01
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18D357B35730CA37AC55746B6CE568EEA7E224ED0B710E587B3683D0E36B2984742D783
sha3_384: 407b3b9e4b0abd8ecc9ca33c09d3bbfd777d7a6af4ffd230ba5bb0d57a262f0a1ce101d65df2c6fcce4a088c720db826
ep_bytes: 558bec6aff6820c74600685ca0460064
timestamp: 2021-10-25 07:33:54

Version Info:
CompanyName: Cat Logic
FileDescription: Домашняя библиотека
InternalName: Catalogic Book List
LegalCopyright: Cat Logic
ProductName: CatList
ProductVersion: 
Comments: 
FileVersion: 0.8.0.13
LegalTrademarks: 
OriginalFilename: 
Translation: 0x0419 0x04e3

Zusy.404982 (B) also known as:

How to remove Zusy.404982 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.